CVE-2023-44981Critical severity
← Search results
AUTOMATICALLY VERIFIEDOFFICIAL VENDOR SOURCECOLLECTED 29 SEP 2026
Apache · AUTOMATIC DISCOVERY
Apache ZooKeeper Product policy
Apache ZooKeeper is tracked by BlackTree as a server-side software product. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
This record passed BlackTree's automatic primary-source checks with a confidence score of 96. It is returned for operational research without requiring routine manual approval. Confirm edition and deployment applicability before acting.
Product overview
Apache ZooKeeper is tracked by BlackTree as a server-side software product. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
Main capabilities
- Networked or application service delivery
- Administrative and operational interfaces
- Versioned maintenance and security updates
Typical use
Used to provide application, infrastructure or operational services to other systems and users.
Deployment
Deployed on servers, virtual machines, containers or managed infrastructure.
This category-level context is generated from the registered product identity. Confirm exact product capabilities on the publisher's page .
Collected lifecycle data
| Product | Apache ZooKeeper |
|---|---|
| Release | Product policy |
| End of Support | 2 February 2024 |
| Date precision | Day |
Known exploited vulnerabilities
Catalogue updated 1 Oct 2026These are product-family matches in the CISA Known Exploited Vulnerabilities catalogue. Confirm the affected product version in the vendor advisory.
No CISA known-exploited entries currently match this mapped product family.
This does not mean the product has no vulnerabilities.
Package vulnerability advisories
Checked 29 Sep 2026OSV advisories are matched through the registered package URL. A package-family match does not prove that the installed release is affected. Check the affected and fixed versions before remediation.
CVE-2026-24308High severity
Apache ZooKeeper has improper handling of configuration values
OSV recordCVE-2026-24281High severity
Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager
OSV recordCVE-2024-51504High severity
Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server
OSV recordCVE-2018-8012High severity
Missing Authorization in Apache ZooKeeper
OSV recordCVE-2025-58457Medium severity
Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands
OSV recordCVE-2024-23944Medium severity
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling
OSV recordCVE-2019-0201Medium severity
Access control bypass in Apache ZooKeeper
OSV recordSource evidence
PRIMARYManual
Apache ZooKeeper official lifecycle source
Apache ZooKeeper 3.8.7 (Latest Stable) | apache-zookeeper-3.8.7-bin.tar.gz ( asc , sha512 ) | apache-zookeeper-3.8.7.tar.gz (source) ( asc , sha512 ) | Apache ZooKeeper 3.7.2 (End-of-Life since 2 Feb 2024) | apache-zookeeper-3.7.2-bin.tar.gz ( asc , sha512 ) | apache-zookeeper-3.7.2.tar.gz (source) ( asc , sha512 ) | Older releases are available in the Apache Archive .
Publisher identity used by product-specific official-source collectors.
Open official vendor source